Yep, tokens are a part of the Authzed.com tenancy layer and are built on top of the SpiceDB, rather than in it.